CVE-2006-6425

Stack-based buffer overflow in the IMAP daemon (IMAPD) in Novell NetMail before 3.52e FTF2 allows remote authenticated users to execute arbitrary code via unspecified vectors involving the APPEND command.

CVSS v2.0 NVD

9.0 HIGHAV:N/AC:L/Au:S/C:C/I:C/A:C

EPSS

58.18% chance of exploitation in the next 30 days, 99th percentile

Published

2006-12-27

Updated

2024-08-07

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/imap/novell_netmail_appe…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/16488

Security advisories

• http://secunia.com/advisories/23437
• http://www.zerodayinitiative.com/advisories/ZDI-06-054.html
• http://securitytracker.com/id?1017437
• https://secure-support.novell.com/KanisaPlatform/Publishing/134/3096026_f.SAL_Public.html
• http://www.kb.cert.org/vuls/id/258753
• http://www.securityfocus.com/bid/21723

References

• CVE Record
• NVD entry